Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132312e302f32342d3234203d3e20323030393530.roa
File: 3134332e32302e3132312e302f32342d3234203d3e20323030393530.roa (raw, json)
Hash identifier: oduVHuCxFSUekB4PVkMkSsEbN68vLQ/zkic0GTRWTZc=
Subject key identifier: 37:EA:15:41:01:3F:9A:03:31:8F:2B:62:16:E8:74:20:66:7A:95:F4
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 71457B0D1012213F1F3A16BBF83AF331957F9EB1
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132312e302f32342d3234203d3e20323030393530.roa
Signing time: Sat 31 May 2025 06:02:18 +0000
ROA not before: Sat 31 May 2025 05:57:18 +0000
ROA not after: Sat 30 May 2026 06:02:18 +0000
asID: 200950
IP address blocks: 143.20.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 17:39:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:45:7b:0d:10:12:21:3f:1f:3a:16:bb:f8:3a:f3:31:95:7f:9e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 31 05:57:18 2025 GMT
Not After : May 30 06:02:18 2026 GMT
Subject: CN=37EA1541013F9A03318F2B6216E87420667A95F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:01:65:27:0f:2f:a6:01:ee:05:fa:7e:28:23:
bf:9d:6a:5f:d8:93:ef:99:25:5f:dd:55:dc:25:ec:
af:09:0a:8d:7d:16:6c:81:65:7f:04:07:ad:c6:58:
f4:16:30:0a:fe:dc:10:d1:73:ec:20:b6:da:8d:bf:
38:e7:58:c4:b1:c9:a7:c8:e3:6c:15:a5:11:8d:34:
6b:43:39:2c:fc:02:e1:5d:5f:62:55:0a:56:cb:61:
79:d6:c6:1e:63:07:b3:77:01:96:ec:c2:bc:47:f7:
46:54:e5:e1:c6:7f:78:e2:6d:7c:89:d5:bc:4c:27:
84:99:71:69:a8:52:c9:ac:14:bc:38:7e:1f:2e:ca:
0a:44:e9:d3:01:96:ad:5b:8c:5c:5c:9a:7e:64:d2:
40:03:00:b9:72:c5:80:ef:b0:9a:f8:4a:ad:d6:1b:
98:03:cd:c7:f5:57:04:90:20:d2:9d:7a:3f:7b:17:
b6:40:43:d5:cb:ae:70:b6:35:05:d4:d7:26:30:2a:
6a:c5:0c:08:f3:d2:2a:18:5c:f1:3f:10:eb:de:20:
55:c7:4a:07:8e:e5:c5:54:36:bf:9f:d4:16:e1:6a:
af:bd:8f:e0:68:88:db:d4:f5:3d:1b:20:f4:a8:f2:
da:b8:d0:bf:b0:ff:5f:2c:0c:2f:6f:07:b9:29:5f:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:15:41:01:3F:9A:03:31:8F:2B:62:16:E8:74:20:66:7A:95:F4
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3132312e302f32342d3234203d3e20323030393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.121.0/24
Signature Algorithm: sha256WithRSAEncryption
af:92:70:4f:1b:95:c5:51:b9:46:1a:16:e4:e1:e7:2e:3b:6e:
80:09:6c:3c:1a:61:f6:8d:9f:71:d3:fa:4f:5d:4e:2d:ef:9a:
b7:f7:a2:27:09:f3:a1:e0:55:ad:36:e0:9f:26:fc:e0:21:b0:
64:0f:ff:d8:34:31:7a:2b:b8:0b:bc:0a:90:e4:c3:88:70:31:
35:b3:83:39:db:7d:cc:61:52:6e:a4:73:b6:2b:ad:ea:9b:94:
a0:cb:bd:51:c4:40:97:9d:03:fc:ec:5b:06:1c:ad:8a:12:b3:
b3:ff:cc:95:eb:2e:d1:d3:66:38:92:83:f0:55:96:58:a4:97:
41:f2:8a:e5:66:47:c9:3f:1e:dd:58:3a:7a:db:18:63:29:7f:
fd:61:3c:25:c0:2c:90:c7:d5:5d:47:cb:b1:1d:3a:42:6a:56:
fc:a2:bd:47:d2:0c:83:aa:25:e0:da:81:28:64:06:43:18:91:
8b:48:25:a1:14:57:e3:0f:a2:70:b7:0a:47:7e:8e:7d:d2:87:
d1:66:d0:6d:e8:84:bc:97:7e:45:6a:45:32:f5:52:a6:f6:7f:
e0:13:17:3a:bb:c5:89:c5:c9:01:09:b7:c4:f3:da:52:bb:30:
7f:7e:8c:dc:33:5a:ac:f2:ff:2b:56:84:f4:9c:e3:96:2c:0c:
c1:ee:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:47:10 2025 by rpki-client